Sophos updating credentials newdatingdirectory com

Once the application is installed, it requests for Google Accessibility Services permissions, begins to capture the user’s screen as well as forcing the victim to use it as the default SMS application.

This malware is also able to grant itself new accesses without user intervention and prevents users from removing its administration permissions or uninstalling it.